🇩🇪
konseptit
2026-11-15 02:33:26
UTC ·
(10 minutes ago)
(mod_security) mod_security triggered on hostname [redacted] 34.47.44.195 (CA/Canada/195.44.47.34.bc.googleusercontent.com)
SQL Injection
🇳🇱
Savvii
2026-11-15 02:05:39
UTC ·
(38 minutes ago)
20 attempts against mh-misbehave-ban on ec102942
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
pipeline.es
2026-11-15 01:19:20
UTC ·
(1 hour ago)
Web scanning / probing for vulnerable paths | URL: /administrator/.env | Evidence: morgana.travel 34.47.44.195 - - [15/Nov/2026:02:19:00 +0100] \"GET /administrator/.env HTTP/1.1\" 404 216 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (K ...
show more
Web scanning / probing for vulnerable paths | URL: /administrator/.env | Evidence: morgana.travel 34.47.44.195 - - [15/Nov/2026:02:19:00 +0100] \"GET /administrator/.env HTTP/1.1\" 404 216 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=CA | ASN: GOOGLE-CLOUD-PLATFORM | Country: CA
show less
Port Scan
Web App Attack
🇩🇪
paissangroup
2026-11-14 23:42:07
UTC ·
(3 hours ago)
Multiple WAF Violations
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-14 22:59:48
UTC ·
(3 hours ago)
Auto-ban: >3000 req/min op 2026-11-14
Web App Attack
SSH
Hacking
🇳🇱
Site.eu
2026-11-13 16:49:58
UTC ·
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇭🇺
kranem
2026-11-13 06:00:53
UTC ·
(1 day ago)
Triggered Cloudflare WAF from CA.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /credentials.json
Timestamp: 2026-11-13T03:22:20Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML ...
show more
Triggered Cloudflare WAF from CA.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /credentials.json
Timestamp: 2026-11-13T03:22:20Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
🇵🇱
MatStef132
2026-11-13 03:53:58
UTC ·
(1 day ago)
MatShield L7: blocked on a protected site (secret-path-probe)
DDoS Attack
🇩🇪
lolyay
2026-11-13 03:48:49
UTC ·
(1 day ago)
34.47.44.195 - - [13/Nov/2026:03:48:47 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.47.44.195 - - [13/Nov/2026:03:48:48 +0000] ...
show more
34.47.44.195 - - [13/Nov/2026:03:48:47 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.47.44.195 - - [13/Nov/2026:03:48:48 +0000] "GET /.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
🇳🇱
ConsulHosting
2026-11-13 03:40:29
UTC ·
(1 day ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇩🇪
zumbo.net
2026-11-13 03:30:22
UTC ·
(1 day ago)
[Fri Nov 13 06:30:21.072806 2026] [proxy_fcgi:error] [pid 492873:tid 492917] [client 34.47.44.195:0] AH01071: Got error 'Primary script unknown'
[Fri Nov 13 06:30:21.172639 2026] [proxy_fcgi:error] [pid 492871:tid 492900] [client 34.47.44.195:0] AH01 ...
show more
[Fri Nov 13 06:30:21.072806 2026] [proxy_fcgi:error] [pid 492873:tid 492917] [client 34.47.44.195:0] AH01071: Got error 'Primary script unknown'
[Fri Nov 13 06:30:21.172639 2026] [proxy_fcgi:error] [pid 492871:tid 492900] [client 34.47.44.195:0] AH01071: Got error 'Primary script unknown'
[Fri Nov 13 06:30:21.274977 2026] [proxy_fcgi:error] [pid 492873:tid 492916] [client 34.47.44.195:0] AH01071: Got error 'Primary script unknown'
[Fri Nov 13 06:30:21.374592 2026] [proxy_fcgi:error] [pid 492873:tid 492919] [client 34.47.44.195:0] AH01071: Got error 'Primary script unknown'
[Fri Nov 13 06:30:21.478788 2026] [proxy_fcgi:error] [pid 492871:tid 492894] [client 34.47.44.195:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
🇺🇸
jumpnjet22
2026-11-13 03:01:30
UTC ·
(1 day ago)
Credential file scan: requested /.git/config (probing for exposed .env / cloud keys)
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-13 01:29:31
UTC ·
(2 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: panel.goblinpot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) App ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: panel.goblinpot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
gamingkante.xyz
2026-11-13 01:14:29
UTC ·
(2 days ago)
[Fri Nov 13 02:14:27.996177 2026] [php:error] [pid 1103940:tid 1103940] [client 34.47.44.195:39312] script '/var/www/pterodactyl/public/index.php' not found or unable to stat
[Fri Nov 13 02:14:28.196068 2026] [php:error] [pid 1103940:tid 1103940] [cl ...
show more
[Fri Nov 13 02:14:27.996177 2026] [php:error] [pid 1103940:tid 1103940] [client 34.47.44.195:39312] script '/var/www/pterodactyl/public/index.php' not found or unable to stat
[Fri Nov 13 02:14:28.196068 2026] [php:error] [pid 1103940:tid 1103940] [client 34.47.44.195:39312] script '/var/www/pterodactyl/public/index.php' not found or unable to stat
[Fri Nov 13 02:14:28.288136 2026] [php:error] [pid 1103940:tid 1103940] [client 34.47.44.195:39312] script '/var/www/pterodactyl/public/index.php' not found or unable to stat
[Fri Nov 13 02:14:28.379711 2026] [php:error] [pid 1103940:tid 1103940] [client 34.47.44.195:39312] script '/var/www/pterodactyl/public/index.php' not found or unable to stat
[Fri Nov 13 02:14:28.479078 2026] [php:error] [pid 1103940:tid 1103940] [client 34.47.44.195:39312] script '/var/www/pterodactyl/public/index.php' not found or unable to stat
[Fri Nov 13 02:14:28.596803 2026] [php:error] [pid 1103940:tid 1103940] [client 34.47.44.195:39312] script '/var/www/pterodac
...
show less
Web App Attack
🇵🇱
strefapi_com
2026-11-13 00:35:41
UTC ·
(2 days ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack